Cerebrate-project vulnerabilities
We track 1 vulnerability in Cerebrate-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 28, 2025.
1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score
Latest Cerebrate-project vulnerabilities
- 9.4 Critical severity
Cerebrate: External Control of Assumed-Immutable Web Parameter
UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edi